Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: HrwMJeTZscszEAkpNLoimeiO3gC/SF497AEBvyyreqA=
Subject key identifier: 85:55:C8:B8:22:5F:84:75:49:1D:93:0A:56:32:BF:5B:E0:38:08:55
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019E1ED9EADA026C79FF301B70ABB717762D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0CF9
Signing time: Wed 13 May 2026 01:00:58 +0000
Manifest this update: Wed 13 May 2026 01:00:58 +0000
Manifest next update: Thu 14 May 2026 01:00:58 +0000
Files and hashes: 1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: Q+nefLWeRIP1BCxt7V6SE5pi6yFTmBCdwAX/OxDPn00=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ea:da:02:6c:79:ff:30:1b:70:ab:b7:17:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: May 13 01:00:58 2026 GMT
Not After : May 14 01:00:58 2026 GMT
Subject: CN=8555c8b8225f8475491d930a5632bf5be0380855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:35:5a:e8:16:e5:a7:51:62:33:52:97:c4:
3e:8d:82:cd:02:e2:29:5b:ac:e2:18:32:a0:f2:39:
9f:f4:af:9b:f7:69:65:af:35:b7:6b:94:a4:9d:53:
4f:3e:b3:25:8e:38:3f:f3:ca:00:2e:6a:62:e0:90:
d7:a2:df:42:6e:a6:73:2d:7a:fc:9c:5c:c1:c0:2b:
ed:3e:8a:58:4f:2e:9e:c6:d2:22:a2:ee:f2:8b:9e:
53:24:43:13:05:55:59:21:e8:34:55:c4:68:9a:e8:
17:a4:57:22:cf:34:83:c6:5a:7c:3e:bf:1f:9a:70:
65:e4:d8:a1:13:ee:ba:9c:92:c9:31:6c:18:4a:0b:
86:fb:96:40:79:27:9a:f4:80:4a:5f:db:9d:71:9d:
e6:7b:a0:0f:d4:a9:33:9d:2a:17:68:83:40:5b:f3:
de:82:68:c3:2b:dd:8f:19:75:a2:fb:07:ed:58:4d:
7b:73:67:91:67:d3:04:3d:da:9d:c6:1c:3e:ea:c6:
09:53:16:80:54:9e:20:22:0b:01:51:b2:87:26:cc:
f1:3b:28:0a:7c:2f:29:64:ce:5e:d1:1b:1f:00:09:
b5:6b:11:f6:93:0a:cf:8a:d2:99:d3:7a:e1:71:57:
59:ed:5a:a2:61:d0:0b:19:cb:51:76:e9:61:23:24:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:C8:B8:22:5F:84:75:49:1D:93:0A:56:32:BF:5B:E0:38:08:55
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:78:82:af:bb:33:40:4e:b0:aa:5b:d0:66:f0:af:7a:29:77:
61:cd:37:66:40:27:84:ae:cc:5f:16:dd:73:2d:09:74:5d:ea:
13:d5:90:be:fc:15:db:f3:b6:51:5b:cc:2e:65:7e:9d:97:4c:
f9:db:c1:9c:2e:a5:91:ea:87:44:53:79:f5:31:a9:55:30:9c:
a1:fd:f0:a4:b2:44:a2:45:0f:51:67:18:39:97:85:f3:3c:ed:
0b:5f:a9:b7:af:95:c5:d4:3e:e0:79:69:b8:1f:10:1b:68:c3:
1a:48:a6:cc:db:d3:e2:70:13:64:19:e4:ee:ca:5b:7e:a0:06:
da:ab:6b:75:85:83:ac:8f:bd:dc:75:0a:f1:a8:5c:ed:c1:d0:
65:41:f7:e2:64:79:e8:d1:2f:f3:4f:95:6f:78:4c:d4:63:8c:
4a:b6:c3:ad:12:2e:f2:5b:6d:a3:9d:7c:35:6c:d1:20:f1:9e:
f5:ed:1b:26:a3:66:08:36:a0:82:03:e3:b9:44:cd:c2:d6:ec:
4e:62:85:5c:03:28:ac:b7:7d:b9:fd:92:c7:ad:72:b3:2b:54:
a1:d6:a3:e2:3a:0a:fb:61:1b:6e:97:8a:15:74:66:9a:52:65:
cf:08:37:1d:42:60:ee:47:ec:fa:bc:e4:f6:0f:7c:65:d1:42:
b2:39:f1:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2eraAmx5/zAbcKu3F3YtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZWYxOWJjYjIzYTJmMDRjNTg2YWMxMzExYTkxYmM3Y2Ey
YTk3NjUwHhcNMjYwNTEzMDEwMDU4WhcNMjYwNTE0MDEwMDU4WjAzMTEwLwYDVQQD
Eyg4NTU1YzhiODIyNWY4NDc1NDkxZDkzMGE1NjMyYmY1YmUwMzgwODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW41WugW5adRYjNSl8Q+jYLNAuIp
W6ziGDKg8jmf9K+b92llrzW3a5SknVNPPrMljjg/88oALmpi4JDXot9CbqZzLXr8
nFzBwCvtPopYTy6extIiou7yi55TJEMTBVVZIeg0VcRomugXpFcizzSDxlp8Pr8f
mnBl5NihE+66nJLJMWwYSguG+5ZAeSea9IBKX9udcZ3me6AP1KkznSoXaINAW/Pe
gmjDK92PGXWi+wftWE17c2eRZ9MEPdqdxhw+6sYJUxaAVJ4gIgsBUbKHJszxOygK
fC8pZM5e0RsfAAm1axH2kwrPitKZ03rhcVdZ7VqiYdALGctRdulhIySFLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVVyLgiX4R1SR2TClYyv1vgOAhVMB8GA1UdIwQY
MBaAFLDvGbyyOi8ExYasExGpG8fKKpdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1Njkt
ZDAwMDNhNmI1MjI0LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1NjktZDAwMDNhNmI1MjI0
LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3iCr7sz
QE6wqlvQZvCveil3Yc03ZkAnhK7MXxbdcy0JdF3qE9WQvvwV2/O2UVvMLmV+nZdM
+dvBnC6lkeqHRFN59TGpVTCcof3wpLJEokUPUWcYOZeF8zztC1+pt6+VxdQ+4Hlp
uB8QG2jDGkimzNvT4nATZBnk7spbfqAG2qtrdYWDrI+93HUK8ahc7cHQZUH34mR5
6NEv80+Vb3hM1GOMSrbDrRIu8ltto518NWzRIPGe9e0bJqNmCDagggPjuUTNwtbs
TmKFXAMorLd9uf2Sx61ysytUodaj4joK+2EbbpeKFXRmmlJlzwg3HUJg7kfs+rzk
9g98ZdFCsjnxrQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:41:10 2026 by rpki-client